📦 Zarf

A path traversal vulnerability in Zarf's archive extraction allows malicious packages to create symlinks pointing outside the destination directory, enabling arbitrary file read or write on the host s...